Skip to content

Add support for is_ca in CSR Params#420

Open
5Dev24 wants to merge 3 commits intorustls:mainfrom
5Dev24:csr-params-is-ca
Open

Add support for is_ca in CSR Params#420
5Dev24 wants to merge 3 commits intorustls:mainfrom
5Dev24:csr-params-is-ca

Conversation

@5Dev24
Copy link

@5Dev24 5Dev24 commented Mar 23, 2026

Add in support for Basic Constraints in CSR Params parsing from DER.

Split out the logic used in IsCa::from_x509 so we can use the same logic when parsing.

Done as some CSRs contain basic constraints and CertificateSigningRequestParams::from_{pem,der} fails to parse them.

@cpu
Copy link
Member

cpu commented Mar 23, 2026

I think this needs test coverage before it could be reviewed for merge.

@5Dev24
Copy link
Author

5Dev24 commented Mar 23, 2026

Added in some test cases. Was a bit unsure on location / method since we can't serialize basic constraints currently. Made the csr test cases with openssl and documented the commands used

5Dev24 added 3 commits March 25, 2026 08:17
Reuse in IsCa's x509 constructor
Update CSR Params from_der documentation to reference Basic Constraints support
@5Dev24 5Dev24 force-pushed the csr-params-is-ca branch from 7d0c62a to 2e474ae Compare March 25, 2026 12:23
Copy link
Member

@djc djc left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks, LGTM!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants